This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/NYQTyqXhO5SfIKalilF-9jPbRJo.roa File: NYQTyqXhO5SfIKalilF-9jPbRJo.roa (raw, json) Hash identifier: 5lrctU6hrWDAzuX+vKa0ZLHPNzNKbXOgcE47QemStpE= Subject key identifier: 35:84:13:CA:A5:E1:3B:94:9F:20:A6:A5:8A:51:7E:F6:33:DB:44:9A Certificate issuer: /CN=afdac241f3010b1ae484bc31f584ad0f9d206734 Certificate serial: 019B76EB78D85A6F7C50FF1CF28600DF1903 Authority key identifier: AF:DA:C2:41:F3:01:0B:1A:E4:84:BC:31:F5:84:AD:0F:9D:20:67:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/NYQTyqXhO5SfIKalilF-9jPbRJo.roa Signing time: Thu 01 Jan 2026 00:18:21 +0000 ROA not before: Thu 01 Jan 2026 00:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44407 IP address blocks: 45.138.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.crl rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:78:d8:5a:6f:7c:50:ff:1c:f2:86:00:df:19:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afdac241f3010b1ae484bc31f584ad0f9d206734 Validity Not Before: Jan 1 00:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=358413caa5e13b949f20a6a58a517ef633db449a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:eb:ce:65:5f:b2:03:43:47:85:27:29:00:40: 0d:54:4f:1a:0c:14:50:0f:99:25:32:14:dc:9e:99: eb:af:9d:0b:fd:d6:dc:57:42:a0:0d:0f:85:90:ca: f7:9b:09:78:bd:b2:e2:5f:a5:32:dd:6b:4c:20:93: 75:83:35:65:1f:90:0b:d7:68:c5:52:22:63:b3:9c: 9a:d1:07:06:33:07:2e:51:57:53:e1:05:a0:6c:94: 9b:c8:9f:35:0e:0c:59:21:21:3c:18:8f:85:0a:f3: 2e:48:b1:ea:63:1a:e5:7f:e1:d5:d5:08:57:35:0e: 5f:0d:96:52:1d:28:6d:ea:1f:ef:2d:0f:c0:34:48: 3c:41:3c:09:af:dc:24:ee:5c:6e:23:3f:42:55:42: 6c:78:2d:6f:52:20:d2:e3:06:6d:88:01:41:be:18: c0:60:05:a6:4c:44:a3:71:ca:b2:d9:cd:80:bc:f3: 3f:3f:a3:56:ef:89:ec:5a:f0:7c:85:22:74:41:b8: 0f:65:05:8a:1f:c7:c4:73:06:3b:d9:a5:4e:18:8a: 76:a2:20:cd:d9:76:0a:7b:f2:1e:36:ab:e4:ef:1e: 76:12:d1:6b:4e:16:d3:b1:24:0d:f6:b5:7b:02:dc: 3c:66:75:7f:d4:2a:0f:a7:52:50:b6:03:25:2b:58: 57:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:84:13:CA:A5:E1:3B:94:9F:20:A6:A5:8A:51:7E:F6:33:DB:44:9A X509v3 Authority Key Identifier: keyid:AF:DA:C2:41:F3:01:0B:1A:E4:84:BC:31:F5:84:AD:0F:9D:20:67:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/NYQTyqXhO5SfIKalilF-9jPbRJo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.138.112.0/22 Signature Algorithm: sha256WithRSAEncryption 47:08:65:d5:77:ff:76:b8:4a:11:73:4c:0c:74:b5:b3:02:a0: 7d:e7:ab:c2:49:0e:37:27:1d:e1:19:99:85:be:41:3b:9b:1f: 4b:a1:86:b6:bd:01:63:75:1a:7a:11:35:53:de:b3:8e:1b:ee: 29:6e:93:4b:fe:3d:59:22:9c:78:c7:07:3c:cc:a0:b1:0c:b4: 3a:eb:1e:97:08:92:43:e9:a9:12:d7:46:c7:84:39:e1:f8:e0: 24:91:ca:eb:b6:03:b5:a2:cb:58:9c:af:cb:ff:cf:89:c5:15: 21:91:eb:8b:e6:73:7c:82:18:3c:a4:96:95:56:e4:5b:31:1a: 38:f2:e3:7f:a0:1b:4c:c7:f7:6a:9f:59:7a:ad:d9:ba:b7:aa: 6c:ca:5a:ff:d6:0c:bd:c2:dc:af:a0:07:a2:54:be:d4:e3:fa: 53:00:44:4f:04:69:6d:4d:be:14:ff:0c:ec:c0:69:b5:5b:b6: 5e:63:10:0d:69:66:31:83:41:13:79:75:df:49:43:36:14:a3: 0b:e1:84:7f:15:db:3d:90:60:df:20:7d:33:20:2a:17:75:d1: d4:64:82:cc:90:37:06:bd:5a:0d:80:a9:7e:6f:ca:cb:78:b4: d9:1f:b3:e0:f2:a6:84:aa:b8:7d:6b:0e:56:fd:81:10:f7:33: 0a:e9:d1:17 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt263jYWm98UP8c8oYA3xkDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZGFjMjQxZjMwMTBiMWFlNDg0YmMzMWY1ODRhZDBmOWQy MDY3MzQwHhcNMjYwMTAxMDAxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTg0MTNjYWE1ZTEzYjk0OWYyMGE2YTU4YTUxN2VmNjMzZGI0NDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+vOZV+yA0NHhScpAEANVE8aDBRQ D5klMhTcnpnrr50L/dbcV0KgDQ+FkMr3mwl4vbLiX6Uy3WtMIJN1gzVlH5AL12jF UiJjs5ya0QcGMwcuUVdT4QWgbJSbyJ81DgxZISE8GI+FCvMuSLHqYxrlf+HV1QhX NQ5fDZZSHSht6h/vLQ/ANEg8QTwJr9wk7lxuIz9CVUJseC1vUiDS4wZtiAFBvhjA YAWmTESjccqy2c2AvPM/P6NW74nsWvB8hSJ0QbgPZQWKH8fEcwY72aVOGIp2oiDN 2XYKe/IeNqvk7x52EtFrThbTsSQN9rV7Atw8ZnV/1CoPp1JQtgMlK1hXmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDWEE8ql4TuUnyCmpYpRfvYz20SaMB8GA1UdIwQY MBaAFK/awkHzAQsa5IS8MfWErQ+dIGc0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjlyQ1FmTUJDeHJraEx3eDlZU3RENTBnWnpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9lYjdhNjUtZjllNi00Nzg0LThmZjct NGI0ZjBmNmY3NTIyLzEvTllRVHlxWGhPNVNmSUthbGlsRi05alBiUkpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9lYjdhNjUtZjllNi00Nzg0LThmZjctNGI0ZjBmNmY3NTIy LzEvcjlyQ1FmTUJDeHJraEx3eDlZU3RENTBnWnpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYpwMA0G CSqGSIb3DQEBCwUAA4IBAQBHCGXVd/92uEoRc0wMdLWzAqB956vCSQ43Jx3hGZmF vkE7mx9LoYa2vQFjdRp6ETVT3rOOG+4pbpNL/j1ZIpx4xwc8zKCxDLQ66x6XCJJD 6akS10bHhDnh+OAkkcrrtgO1ostYnK/L/8+JxRUhkeuL5nN8ghg8pJaVVuRbMRo4 8uN/oBtMx/dqn1l6rdm6t6psylr/1gy9wtyvoAeiVL7U4/pTAERPBGltTb4U/wzs wGm1W7ZeYxANaWYxg0ETeXXfSUM2FKML4YR/Fds9kGDfIH0zICoXddHUZILMkDcG vVoNgKl+b8rLeLTZH7Pg8qaEqrh9aw5W/YEQ9zMK6dEX -----END CERTIFICATE-----Generated at Sun Jan 25 20:50:14 2026 by rpki-client